Weakness (CWE)

CWE-191: Integer Underflow (Wrap or Wraparound)

Base Draft

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

More detail

This can happen in signed and unsigned cases.

Source: MITRE CWE-191

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2026-84411 Public exploit

MikroTik RouterOS Integer Underflow

The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution …

MikroTik RouterOS Network devices

Oct 2, 2026
Critical 9.8

CVE-2024-38063 Public exploit EPSS 74%

Windows TCP/IP Remote Code Execution Vulnerability

Windows TCP/IP Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Aug 13, 2024

CWE-191: Integer Underflow (Wrap or Wraparound)

MikroTik RouterOS Integer Underflow

Windows TCP/IP Remote Code Execution Vulnerability